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January 17, 2019 


John Legere 

Chief Executive Officer 

T-Mobile US, Inc. 

12920 Southeast 38th Street 
Bellevue, WA 98006 

Dear Mr. Legere: 

I write you today to express my disbelief and disappointment regarding T-Mobile’s 
continued partnership with companies that have enabled spying on Americans without 
their knowledge or consent. Your company’s continued sale of customer location data to 
these so-called “location aggregators” is in direct contradiction of your “personal 
evaluation” of the issue six months ago. 

In May 2018,1 wrote to you and the CEOs of the other major wireless carriers, to raise 
serious concerns about your sale of Americans’ location data. In June, 2018, you tweeted 
at me, stating that “I’ve personally evaluated this issue & have pledged that @tmobile 
will not sell customer location data to shady middlemen.” 

I was therefore shocked to read a follow-up investigation by Motherboard last week, 
revealing that another bail bond company was selling location data, including data on T- 
Mobile’s customers. 


I took your May 2018 tweet at face value. I assumed that you were taking personal 
interest in this matter and that you would take swift action to stop the sale of location data 
to shady middlemen. However, in spite of your public promise, your company did not in 
fact take swift action. Instead, your company now claims that it plans to stop selling 
location data to aggregators in March of this year, nine months after your original tweet. 

T-Mobile calls itself the “Uncarrier.” To that end, I urge you to immediately “uncarry” 
the ability of stalkers and middlemen to purchase your customers’ location information. 
Please also provide me with answers to the following questions by February 15, 2019: 


1. In your June 2018 tweet, you stated that you “personally evaluated this issue.” 
Please describe this evaluation in detail, including what steps, if any, you took to 
remain briefed on the issue in the months that followed. 
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2. After your June 2018 tweet, did T-Mobile conduct audits of the location 
aggregators and the downstream buyers of location data? If yes, please describe 
the scope and results of these audits and provide me with copies of any audit 
reports. If no, please explain why not. 

3. Prior to January 8, 2019, what steps, if any, did T-Mobile take to verify that 
downstream buyers of location data did in-fact have the consent of the relevant T- 
Mobile customer before T-Mobile disclosed that individual’s location data? 


Sincerely, 


Ron vv y ucii 

United States Senator 




